Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability in the /rest/whitelist/<version>/check endpoint. The affected versions are before version 8.13.3, and from version 8.14.0 before 8.14.1.

Remediation

References

CVE-2019-20101

Related Vulnerabilities

RubyGems Improper Input Validation Vulnerability (CVE-2017-0900)

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login Multiple Vulnerabilities (5.1.9.2)

WordPress Plugin HB AUDIO GALLERY LITE Arbitrary File Download (1.0.0)

WordPress Plugin Tickera-WordPress Event Ticketing Unspecified Vulnerability (3.4.6.7)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-6414)

Severity

Medium

Classification

CVE-2019-20101

Tags

Missing Update Known Vulnerabilities